Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/3/326131333a646638353a623130373a3a2f34382d3438203d3e20323136333234.roa
File:                     326131333a646638353a623130373a3a2f34382d3438203d3e20323136333234.roa (raw, json)
Hash identifier:          pcav4z2NlHv/LUKJ1yG5tqd1ogR17fNezrIFk/ggHwI=
Subject key identifier:   89:DC:93:AF:77:57:84:FE:77:B6:AE:40:67:56:19:73:0C:AB:35:6E
Certificate issuer:       /CN=40C5E16CC09D12B91FFDE58141213F2E82A6F498
Certificate serial:       448DF217525E7EF2F79B0437500D7A50D7E40BD0
Authority key identifier: 40:C5:E1:6C:C0:9D:12:B9:1F:FD:E5:81:41:21:3F:2E:82:A6:F4:98
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/40C5E16CC09D12B91FFDE58141213F2E82A6F498.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/3/326131333a646638353a623130373a3a2f34382d3438203d3e20323136333234.roa
Signing time:             Sat 16 Mar 2024 13:36:00 +0000
ROA not before:           Sat 16 Mar 2024 13:31:00 +0000
ROA not after:            Sat 15 Mar 2025 13:36:00 +0000
asID:                     216324
IP address blocks:        2a13:df85:b107::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:8d:f2:17:52:5e:7e:f2:f7:9b:04:37:50:0d:7a:50:d7:e4:0b:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40C5E16CC09D12B91FFDE58141213F2E82A6F498
        Validity
            Not Before: Mar 16 13:31:00 2024 GMT
            Not After : Mar 15 13:36:00 2025 GMT
        Subject: CN=89DC93AF775784FE77B6AE40675619730CAB356E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:ec:5d:17:ed:4f:e9:5b:50:80:d2:ba:4d:45:
                    c6:12:94:20:7a:f8:ff:6c:8f:77:29:c7:47:f3:15:
                    e2:dc:75:dc:7d:9f:0e:bd:e8:dd:a3:ba:10:83:ce:
                    3e:cf:04:b3:06:2d:e2:36:6d:86:e0:f9:c5:4d:5f:
                    ee:e5:ae:00:0e:37:24:00:79:48:54:92:23:45:e7:
                    8a:c1:2c:bb:2f:25:d1:39:59:21:15:96:0b:5e:1e:
                    03:ae:61:05:2d:d9:0b:18:c8:a5:ee:6c:ed:53:f5:
                    a8:b3:bc:ee:02:1c:bc:8b:7a:26:96:61:93:f8:41:
                    27:97:28:4b:a5:fc:1b:15:a1:dd:ef:2b:ae:71:3c:
                    1d:24:81:e0:6e:9a:06:2f:24:3b:fe:05:99:04:72:
                    c2:5c:a6:46:85:9b:2b:45:30:c2:ed:e5:6a:d7:e3:
                    89:04:dc:d1:ce:11:ec:12:9f:07:3c:88:fe:74:b9:
                    a8:10:db:40:99:4b:2e:26:83:cc:52:87:89:6e:2e:
                    d0:0a:ad:c9:af:e5:e3:51:85:2a:53:2c:22:d8:2d:
                    8c:86:25:d5:1a:7a:d4:29:93:ec:65:92:30:fd:42:
                    e4:cf:18:ea:c8:87:7a:a6:8b:25:19:d5:21:ed:e9:
                    d5:a7:85:65:d7:03:17:2d:08:a2:e4:82:2b:30:fe:
                    6a:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:DC:93:AF:77:57:84:FE:77:B6:AE:40:67:56:19:73:0C:AB:35:6E
            X509v3 Authority Key Identifier:
                keyid:40:C5:E1:6C:C0:9D:12:B9:1F:FD:E5:81:41:21:3F:2E:82:A6:F4:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/3/40C5E16CC09D12B91FFDE58141213F2E82A6F498.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/40C5E16CC09D12B91FFDE58141213F2E82A6F498.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/3/326131333a646638353a623130373a3a2f34382d3438203d3e20323136333234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a13:df85:b107::/48

    Signature Algorithm: sha256WithRSAEncryption
         33:cb:36:65:83:6a:e2:b6:c2:dd:89:08:3b:cb:ae:22:4f:e0:
         69:22:b0:8a:c8:1d:73:5f:ae:37:4b:f5:46:70:e3:3c:3f:47:
         8d:e1:57:58:b1:ce:3a:29:72:4c:4d:29:00:67:7c:73:da:75:
         12:b3:84:ec:55:bb:78:95:36:39:0c:a0:3c:c3:6a:a3:00:09:
         bb:35:bd:38:45:3d:16:c2:b2:7a:d8:ed:bc:11:a3:65:93:05:
         15:c3:e9:51:b3:67:2e:63:3a:6e:30:a1:f8:73:5e:84:c7:d2:
         d4:8a:23:49:44:f8:39:43:6e:06:96:8c:96:13:6e:01:5c:51:
         4a:f4:2a:76:8c:5e:1d:dc:b5:e9:61:2f:e0:dd:06:32:fb:01:
         d2:94:ee:84:32:95:7b:5a:fe:91:79:fd:b5:5f:8b:1d:b7:50:
         6f:dc:73:4a:7f:53:55:6c:2f:77:88:99:21:6b:c5:73:f5:9d:
         50:c9:26:94:65:d7:99:ba:3b:e9:17:e1:32:32:9a:c5:0f:1d:
         9d:c2:30:19:f2:84:a3:d0:23:87:10:bd:37:7f:6e:d4:00:07:
         0f:64:27:15:1e:f0:16:ae:64:9b:57:54:90:d7:27:f2:b6:c9:
         85:a7:5c:d8:98:7b:16:a8:d2:30:4e:c6:0c:38:47:00:31:fa:
         53:56:66:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----